Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
File: 37L5jV2TMMKCX8ikvqWOWitKvvM.mft (raw, json)
Hash identifier: 6uru5RLKlD5NO7pTI2/meDpZ4HQKhg6U81tMx3MN3o8=
Subject key identifier: 00:B7:BC:A1:C1:E7:48:70:82:4B:A6:A5:3E:92:51:93:24:9E:ED:A6
Authority key identifier: DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
Certificate issuer: /CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Certificate serial: 01A0F59FCFD92D18269ADC67F1F41D097981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
Manifest number: 0137
Signing time: Thu 01 Oct 2026 04:01:26 +0000
Manifest this update: Thu 01 Oct 2026 04:01:26 +0000
Manifest next update: Fri 02 Oct 2026 04:01:26 +0000
Files and hashes: 1: 37L5jV2TMMKCX8ikvqWOWitKvvM.crl (hash: 5GX8wFTM04ZVgO4s9cnViq1i6XF7VcSkuZKksYY4VBA=)
2: ORzFbjO5Nia0kcigCY2OWktPzNg.roa (hash: H6lUS3aRzmCFN45+2w1+AEQR77kkwodYeALKmKNgXVM=)
3: _aahlkyboV8i3HTyR4FJOxLSMv4.asa (hash: dD7N2xKq7irXsIrhG/fQS/8UXa6cF4atm0nL0eK5Z0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 23:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:9f:cf:d9:2d:18:26:9a:dc:67:f1:f4:1d:09:79:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Validity
Not Before: Oct 1 04:01:26 2026 GMT
Not After : Oct 2 04:01:26 2026 GMT
Subject: CN=00b7bca1c1e74870824ba6a53e925193249eeda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:ad:23:ab:4a:72:9e:97:88:53:a9:6f:f6:
0d:7c:02:f4:f3:d3:d0:01:d3:3d:59:08:34:55:cf:
e5:e8:96:3e:36:a7:3c:fd:0e:72:18:ab:b7:2f:ec:
7e:76:06:57:e5:05:58:74:cb:e7:e9:cb:e8:0a:0b:
e4:e9:60:47:68:6a:91:23:08:93:7c:55:30:55:3f:
37:5d:36:fb:97:1d:f1:dd:af:19:14:ff:34:bb:2f:
ec:6f:c0:97:48:c4:da:b1:b1:94:d4:72:f4:85:82:
2c:ad:3d:83:92:ed:07:e7:e7:cc:05:8c:37:ad:9b:
19:d6:20:a2:23:f0:25:44:09:47:53:6a:c7:cb:89:
0a:19:8c:00:fb:6a:2a:6f:12:67:cd:0a:dd:19:67:
89:4e:db:29:0e:27:0f:f7:7b:38:b6:4b:be:e0:5f:
1f:2a:96:ef:d9:0d:74:c6:1d:cd:6e:c5:81:a4:c7:
2b:1c:ee:b3:a4:fa:46:99:25:a9:c6:f6:80:ef:d3:
12:a1:39:5e:2f:a0:9b:db:de:14:09:b6:c1:40:fb:
2a:21:94:78:af:6f:c2:d6:78:d9:0f:d6:55:da:cd:
23:dc:91:4b:f5:39:75:bb:2a:9d:df:9b:4c:39:43:
3c:09:19:64:40:e8:84:a0:31:15:d1:e5:eb:08:7a:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:BC:A1:C1:E7:48:70:82:4B:A6:A5:3E:92:51:93:24:9E:ED:A6
X509v3 Authority Key Identifier:
keyid:DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b1:cb:dc:a4:3a:1b:01:39:9b:93:76:ad:4d:fa:d4:6a:a3:
00:af:b8:f4:9f:b8:1e:2b:bf:84:63:71:37:5a:34:97:69:1a:
7f:86:8d:c6:ea:a7:80:bd:bc:14:d5:5a:68:03:8d:f1:36:27:
1e:78:86:2d:ef:4b:74:fe:4f:75:c5:af:81:01:f3:b0:79:f6:
4e:0f:c3:64:6b:7d:a4:cd:7b:51:18:ed:42:0b:7d:0c:d3:26:
a8:a7:18:47:ee:48:34:82:2f:c4:9d:61:d5:b8:c3:f9:91:66:
3d:a4:f9:f3:27:11:29:52:dd:64:b6:a6:c9:b8:69:c7:a2:64:
ed:91:11:7d:f5:e6:b2:d4:35:5b:6c:d2:dc:80:e1:20:92:4f:
3e:e1:34:63:04:18:80:a7:c7:08:10:d3:38:5d:06:ae:a8:a8:
1e:ac:2a:65:f2:29:09:91:00:35:2c:e5:1d:9d:21:ad:ec:ae:
1b:c2:48:fd:f1:17:37:78:eb:c7:22:3a:98:ae:52:41:25:45:
32:75:fc:ca:1c:71:18:24:f8:3b:0a:b0:e6:19:43:ff:78:ae:
6f:63:e5:96:c5:cf:2b:27:7e:85:bc:cb:46:1e:ef:3c:0d:9f:
cd:0c:56:13:5d:12:3e:de:b7:87:33:15:0b:4e:34:de:b1:86:
55:05:39:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:47:27 2026 by rpki-client